Privacy Policy

1. Introduction

This Privacy Policy explains how Peptide Coaching Academy ("PCA", "we", "us") collects, uses, and protects your personal data when you use our website and courses. We are the data controller. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact for data protection matters: admin@peptidecoachingacademy.com.

2. What data we collect

• Account data — your email address, and your name where you provide it.
• Purchase data — records of the courses you have bought and your enrolment status. Card payments are processed by Stripe; we do not store your full card details.
• Progress data — your progress through courses and quiz results.
• Technical data — basic information such as your device and browser, collected to keep the service secure and working.

3. How we use your data

• To create and manage your account and give you access to purchased courses.
• To process your payments (via Stripe) and provide receipts.
• To record your course progress and issue certificates.
• To respond to your enquiries and provide support.
• To keep the service secure and to meet our legal obligations.

4. Legal bases

We process your data to perform our contract with you (providing the courses you buy), to meet our legal obligations (such as tax records), and for our legitimate interests in running and securing the service. Where we ever rely on consent (for example, optional marketing), you can withdraw it at any time.

5. Who we share data with

We use trusted service providers to run PCA, and share data with them only as needed to provide the service:

• Supabase — secure database and account authentication.
• Stripe — payment processing.
• Our hosting provider — to serve the website.

We do not sell your personal data. We may disclose data if required by law.

6. International transfers

Some of our providers may process data outside the UK. Where they do, appropriate safeguards (such as standard contractual clauses or equivalent protections) are in place.

7. How long we keep it

We keep your account and purchase data for as long as your account is active and as long as needed to meet legal and accounting obligations. You can ask us to delete your account at any time.

8. Your rights

Under UK GDPR you have the right to access your data, correct it, request its deletion, restrict or object to processing, and request a copy of your data in a portable format. To exercise any of these rights, email admin@peptidecoachingacademy.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We take reasonable technical and organisational measures to protect your data, including secure authentication and encrypted payment processing. No online service can be guaranteed 100% secure, but we work to protect your information.

10. Cookies

We use essential cookies needed to keep you signed in and to keep the service secure. We do not use these for advertising.

11. Changes

We may update this Privacy Policy from time to time. The current version is always published on this page.

12. Contact

For any privacy questions or to exercise your rights, contact admin@peptidecoachingacademy.com.